From 0d54b9630142daf6daa024205f0be46dcb0d8e08 Mon Sep 17 00:00:00 2001 From: Kenny Ballou Date: Wed, 30 Oct 2019 22:10:10 -0600 Subject: firewall: allow http-alt from internal network Allow clients from the internal network to access the alternative HTTP port. Signed-off-by: Kenny Ballou --- services/nftables-rules.nft | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'services') diff --git a/services/nftables-rules.nft b/services/nftables-rules.nft index 98b4be6..d3df0af 100644 --- a/services/nftables-rules.nft +++ b/services/nftables-rules.nft @@ -11,7 +11,7 @@ table inet filter { udp dport domain ip saddr 172.16.0.0/12 counter accept tcp dport 3000 ip saddr 127.0.0.1/8 counter accept tcp dport 8000 ip saddr 127.0.0.1/8 counter accept - tcp dport http-alt ip saddr 127.0.0.1/8 counter accept + tcp dport http-alt ip saddr { 127.0.0.1/8, 10.1.0.0/8 } counter accept tcp dport ssh counter accept counter } -- cgit v1.2.1